Messages in this thread | | | Date | Fri, 6 Mar 2015 09:50:02 -0600 (CST) | From | Christoph Lameter <> | Subject | Re: [PATCH] capabilities: Ambient capability set V2 |
| |
On Thu, 5 Mar 2015, Serge E. Hallyn wrote:
> > > So I'd say drop this change ^ > > > > Then the ambient caps get ignored for a executables that have capabilities > > seton the file? > > Yes. Those are assumed to already know what they're doing.
Ok can we get this patch merged now if I do this change (effectively ambient caps for binaries that have no caps set) and deal with the other issues later? This would cover most of the use cases here at least.
| |